Re: I was auto-outed by an IMG tag in HTML spam

[Adam Shostack <adam@homeport.org>]

| > -----Original Message-----
| > From:	Anonymous [SMTP:anon@anon.efga.org]
| 	[Trei, Peter]  [edited]
| > They sent a message to my
| > off-site address (along with those of other critics about whom
| > they wanted to know more).  It was an HTML message with an
| > embedded IMG tag.
| > 
| > When Netscape saw that IMG
| > tag, it happily connected to marketing's "customer" tracking
| > server, and downloaded the keyed graphic.
| > 
| > My boss just let me see the log he got from the marketing VP,
| > showing clearly that my workstation read the message.  

	What exactly did that log say?

oops.netscape.com - - [15/Feb/1998:13:55:53 +0200] "GET /sekrit/tracilords.gif"

????

	Doesn't clearly show anything.  Theres IPspoofing.  Theres log
spoofing.  There's being forwarded the message by a buddy (or someone
avoiding the entrapment by forwarding the mail (anonymously) to
cypherpunks, thus getting hundreds of people who are totally
uninvolved to see it.

Adam

-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume